titra vulnerabilities

2 known vulnerabilities in titra from Kromitgmbh. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  titra: Improper Access Control

  CVE-2026-21694Jan 8, 2026Kromitgmbh

  Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.9

• 9.1 Critical severity

  Titra is open source project time tracking software.

  CVE-2025-69288Dec 31, 2025Kromitgmbh

  Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule in the database. The value is then passed to a NodeVM value to execute as code. Without sanitization, it leads